OpenSearch: How to Fix Security Analytics Error When You Try to Create a New Detector

Posted on

Sometimes, you can encounter an error shown at the bottom right when you try to create a detector or click on security analytics or any other links within the analytics.
For example, in the screenshot below:

To fix that:
Option 1:

  • Go to Index Management > Indexes
  • Search for the index .opensearch-sap-log-types-config
  • Delete it.

An example is in the screenshot below:

  • Go to Security Analytics > Threat detectors > Log types

 Now you can see lists of Log types.

If you don’t find index .opensearch-sap-log-types-config
Option 2:

  • Go to Dev Tools
  • Use this command:
GET .opensearch-sap-log-types-config

You will see:

  • Use this command
DELETE .opensearch-sap-log-types-config

Now, everything works fine, and you can Create a New Detector.

The post OpenSearch: How to Fix Security Analytics Error When You Try to Create a New Detector appeared first on SOC Prime.

Related Posts